CVE Vulnerabilities - 16 August 2026

The Edimax EW-7478APC Wi-Fi router has a security issue that could allow an attacker to disrupt its functionality. This is because the router's software does not properly handle certain input, which c...

A security flaw in Edimax EW-7478APC's software allows hackers to send malicious data that can cause the system to behave unexpectedly. This can happen remotely, which means it's a risk for anyone usi...

Old versions of the SiYuan kernel have a weakness in how they handle API tokens. This makes it easy for an attacker to try many different tokens until they find the right one. To fix this, update to v...

Net::OAuth::Client versions before 0.32 for Perl allow a service provider to quietly change the security level of OAuth 1.0a to OAuth 1.0, which can be exploited by attackers to take control of user a...

A critical vulnerability in Debian's Samba package allows attackers to execute malicious code on a system without needing a password. This affects any Debian system running Samba, which is used for fi...

Scriban, a templating engine, allows templates to write to any public CLR property of objects passed to it, potentially overwriting intended values. This can lead to unexpected behavior in application...

The ARForms plugin for WordPress has a security issue that allows unauthenticated attackers to delete files or access sensitive data if another plugin or theme is installed that contains a specific ty...

The Frontend Admin plugin for WordPress has a security flaw that lets attackers gain access to administrator accounts. This can happen when a malicious user submits a specially crafted form on the web...

The ProSolution WP Client plugin for WordPress has a security issue that allows hackers to upload any file to the website without needing a password. This could allow them to run malicious code on the...

A security issue in the Tenda AC10 router's web server could allow an attacker to bypass authentication remotely. This could potentially give the attacker access to the router's settings or other sens...

The Phoca Cart extension for Joomla has a security issue that allows an attacker to access sensitive information in the database. This can happen when a user visits a public shop items page. To stay s...

If you use Scriban to render templates with sensitive data, a bug can cause previously exposed data to remain accessible even after you tighten security settings. This happens when Scriban reuses a ca...

An attacker can create log files in any directory they choose on a WordPress site using WPvivid Backup & Migration. This can lead to sensitive information being exposed. Update to version 0.9.131 or l...

The Simple JWT Login WordPress plugin, used for Google sign-in, allows unauthorized users to access any account, including administrator accounts, if they have the correct email address. This affects ...

The Solace Extra plugin for WordPress has a security issue that allows attackers with a low-level account to delete important site content and settings. This could cause significant data loss and disr...

The ProSolution WP Client plugin for WordPress allows unauthenticated attackers to delete any file on the server, including sensitive files like wp-config.php. This could lead to a complete takeover o...

A vulnerability in the Royal Elementor Addons plugin for WordPress allows attackers with contributor-level access to make requests to any website, potentially accessing or modifying internal services....

The Query Wrangler plugin for WordPress has a security flaw that allows an authenticated user to run code on the server. This can happen if the user has a subscriber-level account or higher. To stay s...

Authenticated users with contributor-level access can delete any files on the server using the Podlove Podcast Publisher plugin for WordPress. This can lead to serious security risks if the wrong file...

Scriban templates can cache authorized content, allowing unauthorized access to sensitive data. This issue affects applications that use Scriban with a pooled TemplateContext and an ITemplateLoader th...

A malicious template can cause Scriban to crash the host process by inserting a large number of elements into an array, leading to an out-of-memory exception. This can happen even when safety controls...

The stoatchat software before version 0.15.0 is vulnerable to a denial of service attack. An attacker can exploit this vulnerability by hosting malicious SVG files with large dimensions, which can cau...

If you use Scriban templates, an attacker can send a specially crafted template that crashes your application. This can happen even if you're not logged in. To protect yourself, update to Scriban vers...

Scriban's template engine can crash if it encounters circular data, which can happen when user-controlled data is used in templates. This can occur in web applications that map user input to rendering...

A vulnerability in Scriban template parsing can cause a program crash if it processes a specially crafted input, such as a deeply nested array initializer. This can happen even if the default safety l...